Bug: OAuth Authorization Server Metadata Discovery Violates RFC 8414 When Issuer URL Contains a Path

Bug: OAuth Authorization Server Metadata Discovery Violates RFC 8414 When Issuer URL Contains a Path: a task in LegoFlow-SWE (Harbor dataset). According to RFC 8414 Section 3.1, when the authorization server's issuer identifier includes a path component, the well‑known URI must be inserted between…

The task

According to RFC 8414 Section 3.1, when the authorization server's issuer identifier includes a path component, the well‑known URI must be inserted between the host and that path. For an issuer `http://localhost:8000/api/mcp`, the discovery endpoint should be:

Part of Lego-X/LegoFlow-SWE.